Privacy policy

INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA BY STRONG MND CORPORATION S.R.L

1. PURPOSE OF THIS DOCUMENT
This document aims to inform, in accordance with Article 13 of the General Data Protection Regulation (hereinafter “GDPR”), data subjects (Partners – non-authorized individuals, representatives of legal entities) about how their personal data is processed in accordance with national and European legislation (Law no. 190/2018, Law no. 506/2004, Regulation (EU) 2016/679, Directive 2002/58/EC) currently in force. STRONG MND CORPORATION S.R.L (hereinafter also referred to as “we”) is obliged to manage personal data securely and only for the specified purposes.

This information notice applies to our activity carried out on the website. We operate on the website www.wokfull.eu, its subdomains, or affiliated websites, collectively referred to as the “site”.

2. ABOUT US

Name: STRONG MND CORPORATION S.R.L
Registered office: Suceava, Bld. Sofia Vicoveanca, No. 107
VAT ID: RO30852551
Trade Register No.: J33/947/2012
E-mail: dpo@wokfull.eu

In relation to personal data processed via the website, we act as a data controller and are responsible for determining the purposes and means of processing personal data, as well as ensuring appropriate technical and organizational measures.

3. WHAT PERSONAL DATA DO WE PROCESS?

Evaluation of your application for available positions within our company.
Collected data: Name, surname, contact details, professional experience, education, skills, other relevant information from your CV.
Legal basis: Your explicit consent expressed by submitting your CV and contractual necessity.
Recipients: Human Resources Department and relevant managers.

Storage period: Your data will be stored during the recruitment process and then deleted or anonymized, unless you consent to future opportunities.

Handling and resolving complaints regarding our products or services.
Collected data: Name, surname, contact details, complaint details.
Legal basis: Legitimate interest of the company.
Recipients: Customer Relations Department and relevant departments.
Storage period: Data is stored during resolution and for an additional 6 months.

Evaluation of eligibility for becoming a franchisee.
Collected data: Name, surname, contact details, business experience, financial situation, other relevant information.
Legal basis: Consent and contractual necessity.
Recipients: Company management and relevant departments.
Storage period: During evaluation and contractual period if franchise is granted.

Billing data:
Collected data: email address, phone number.
Legal basis: Contractual (email), legitimate interest (phone).
Recipients: Accounting department.
Storage period: One month from request.

Technical data: IP address, browser type/version, location/time zone settings, plugins, operating system, and technologies used.

We do not intentionally collect special categories of personal data.

4. LEGAL BASIS FOR PROCESSING

Legal obligation – fiscal data
Contractual – applications and franchise process
Legitimate interest – service improvement and complaint resolution
Consent – participation in contests, uploading content

5. PURPOSES OF PROCESSING

Contract execution
Communication (email, phone)
IT system management and security
Dispute resolution
Handling suggestions and feedback

We use data only for these purposes unless legally required otherwise.

6. DATA DISCLOSURE

Contractual partners (legal, accounting)
Service providers (IT, hosting, cloud)
Authorities or courts when required
Platforms for communication and surveys

7. DATA RETENTION

We store personal data only as long as necessary.

Recruitment – 3 months
Franchise – 3 months
Complaints – 6 months
Contact – 6 months

Data may be anonymized for research/statistics.

8. DATA SECURITY

We implement security measures including:
– Policies and procedures
– Data minimization
– Access restriction
– Traffic monitoring
– Secure storage and backups
– Secure data transfer
– Staff training
– Data anonymization

Despite efforts, breaches may occur. We follow strict procedures to manage incidents.

9. YOUR RIGHTS

Right of access
Right to rectification
Right to erasure
Right to restriction
Right to object
Right to data portability
Right to withdraw consent
Right to lodge a complaint (ANSPDCP)

10. EXERCISING YOUR RIGHTS

Contact: dpo@wokfull.eu

We respond within one month (may extend if needed).

11. REFUSAL TO PROVIDE DATA

If you do not provide data, we cannot deliver services.

12. AUTOMATED DECISION-MAKING

We do not use automated decision-making or profiling.

13. INTERNATIONAL TRANSFER

Transfers outside EU/EEA occur only with adequate safeguards, such as:
– Adequacy decisions
– Standard contractual clauses
– Explicit consent or legal necessity

14. CHANGES

We may update this notice. Updates are effective upon publication.

This notice was issued on 01.08.2024.